---
name: "pwhistory.conf"
section: "5"
platform: "linux"
package: "pam"
version: "1.7.3-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/pwhistory.conf"
---

# pwhistory.conf(5)

pam\_pwhistory configuration file

## NAME

pwhistory.conf - pam\_pwhistory configuration file

## DESCRIPTION

**pwhistory.conf** provides a way to configure the default settings for saving the last passwords for each user. This file is read by the *pam\_pwhistory* module and is the preferred method over configuring *pam\_pwhistory* directly.

The file has a very simple *name = value* format with possible comments starting with *#* character. The whitespace at the beginning of line, end of line, and around the *=* sign is ignored.

## OPTIONS

debug

Turns on debugging via [**syslog**(3)](/syslog/3.md).

enforce\_for\_root

If this option is set, the check is enforced for root, too.

remember=N

The last *N* passwords for each user are saved. The default is *10*. Value of *0* makes the module to keep the existing contents of the opasswd file unchanged.

retry=N

Prompt user at most *N* times before returning with error. The default is 1.

file=/path/filename

Store password history in file */path/filename* rather than the default location. The default location is /etc/security/opasswd.

## EXAMPLES

/etc/security/pwhistory.conf file example:

```
debug
remember=5
file=/tmp/opasswd
```

## FILES

/etc/security/pwhistory.conf

the config file for custom options

## SEE ALSO

**pwhistory**(8), [**pam\_pwhistory**(8)](/pam_pwhistory/8.md), [**pam.conf**(5)](/pam.conf/5.md), [**pam.d**(5)](/pam.d/5.md), [**pam**(8)](/pam/8.md)

## AUTHOR

pam\_pwhistory was written by Thorsten Kukuk. The support for pwhistory.conf was written by Iker Pedrosa.